Reporting

Force/Keep search saved as "Report" to stay on "Statistics" tab?

woodcock
Esteemed Legend

When saved as a Dashboard Panel there is a Visualization called Statistics Table (and also Events) but these are not available when saving as a Report. Is there any way to keep it on the Statistics tab?

Labels (1)
0 Karma
1 Solution

woodcock
Esteemed Legend

I figured this out!
If your data would normally end on the Events tab, the Save dialog has 3 options: Events, Events + Visualization or Visualization.
If your data would normally end on the Stats tab, the Save dialog has 3 options: Stats, Stats + Visualization or Visualization.
Just pick what you need when you save.
I am so used to not reading the Save dialog in detail and just clicking Save that I did not realize this was there.

View solution in original post

0 Karma

woodcock
Esteemed Legend

I figured this out!
If your data would normally end on the Events tab, the Save dialog has 3 options: Events, Events + Visualization or Visualization.
If your data would normally end on the Stats tab, the Save dialog has 3 options: Stats, Stats + Visualization or Visualization.
Just pick what you need when you save.
I am so used to not reading the Save dialog in detail and just clicking Save that I did not realize this was there.

0 Karma
Get Updates on the Splunk Community!

Splunk Forwarders and Forced Time Based Load Balancing

Splunk customers use universal forwarders to collect and send data to Splunk. A universal forwarder can send ...

NEW! Log Views in Splunk Observability Dashboards Gives Context From a Single Page

Today, Splunk Observability releases log views, a new feature for users to add their logs data from Splunk Log ...

Last Chance to Submit Your Paper For BSides Splunk - Deadline is August 12th!

Hello everyone! Don't wait to submit - The deadline is August 12th! We have truly missed the community so ...